growminance.com 피싱 및 보안 점검

The domain growminance.com is identified as a credential theft phishing site targeting users through deceptive login interfaces. Analysis indicates the domain is currently offline, though prior activity suggests it was designed to harvest sensitive account credentials under the guise of a financial service. No direct brand impersonation has been confirmed, but the infrastructure aligns with common credential harvesting tactics. Infrastructure analysis reveals the domain was registered on May 02, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 198.38.92.23 and is flagged by 17 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and holds a Gridinsoft trust score of 1/100, alongside a Scamadviser trust score of 13/100. Detected technologies include Chart.js, Bootstrap, LiteSpeed, Smartsupp, prettyPhoto, OWL Carousel, jQuery, and HTTP/3, which are often leveraged to create convincing fake interfaces. The SSL certificate is issued by Let’s Encrypt, a common choice for malicious domains due to its free and automated issuance process. As of the latest assessment, growminance.com has been taken offline, though such domains often reappear under different names or infrastructure. Users are advised to treat any prior interactions with the domain as compromised and reset credentials for accounts accessed during that period. Organizations should monitor for related indicators, including the IP address 198.38.92.23 and the registrar PDR Ltd., in network logs or threat intelligence feeds. Proactive blocking of the domain and associated IP is recommended to prevent potential future exposure.